Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VhMOweFv010evwlCQzS8eEpuFUg.roa
File: VhMOweFv010evwlCQzS8eEpuFUg.roa (raw, json)
Hash identifier: pfnOTZwCtocFch/LuV2X0GQj1Kdv9TjXIxQDVXlfy7c=
Subject key identifier: 56:13:0E:C1:E1:6F:D3:5D:1E:BF:09:42:43:34:BC:78:4A:6E:15:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 76D2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VhMOweFv010evwlCQzS8eEpuFUg.roa
Signing time: Mon 14 Jul 2025 04:41:45 +0000
ROA not before: Mon 14 Jul 2025 04:41:45 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30418 (0x76d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 14 04:41:45 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=56130EC1E16FD35D1EBF09424334BC784A6E1548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:c8:c0:6d:92:54:a6:38:32:a5:94:4c:b6:
c9:27:98:04:85:0a:1a:d3:77:a9:a0:ef:36:bf:f9:
eb:17:d9:4e:e5:9d:a9:84:d9:10:03:5c:65:31:68:
b5:8d:bb:ae:da:ae:08:3a:fa:d9:dd:3c:b7:e9:eb:
28:f1:c0:78:e4:77:93:ec:2c:bd:98:47:e3:87:f3:
08:67:5b:85:ec:30:ac:7e:3a:24:a4:cd:8d:7c:2e:
f7:79:33:0c:5f:9b:83:4f:a6:14:09:8d:12:40:71:
9f:43:ce:25:9f:53:8b:d6:2d:36:e7:43:7f:26:f8:
de:98:85:7b:7a:c1:2b:2b:b1:09:f6:74:c6:1f:92:
a0:73:aa:7b:db:53:dd:cf:a7:99:11:7a:5f:b5:dd:
04:25:13:f8:be:24:da:3f:c9:43:67:21:4f:43:99:
be:f2:96:47:de:94:c2:0b:5a:02:34:d0:74:03:16:
ee:e8:82:99:96:06:77:6f:19:c2:0f:c7:f5:8a:3a:
ac:a2:60:61:07:05:04:b9:21:d2:4d:40:ef:d8:56:
27:1f:dd:60:1b:13:fe:36:f5:07:7a:f8:09:22:4f:
21:c3:79:66:15:4f:b9:f7:13:ea:24:f5:63:d7:c4:
bb:19:3a:b0:65:b1:0d:2e:a5:1c:44:4d:96:42:7d:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:0E:C1:E1:6F:D3:5D:1E:BF:09:42:43:34:BC:78:4A:6E:15:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VhMOweFv010evwlCQzS8eEpuFUg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
b1:68:ff:5b:cd:29:cd:a7:2f:7c:0a:24:ec:56:52:29:a9:40:
ed:2f:5e:72:59:1a:63:af:b0:7e:2b:60:5f:2f:8e:01:75:10:
66:cb:10:1b:f8:96:1a:34:be:ec:31:01:26:93:89:85:ed:f3:
7e:16:35:34:d7:d5:5a:d8:f1:32:b1:74:31:63:96:03:7e:1f:
5a:e9:b5:d8:e4:08:24:be:6b:3a:5d:26:05:12:2b:55:44:d4:
1a:8d:28:6e:01:2b:75:98:c2:6e:d5:01:cd:4c:c2:0b:0f:cd:
f5:ba:dc:4e:66:20:92:d8:31:ac:a5:41:1d:bc:34:87:7f:00:
31:9b:12:23:bc:a5:b5:6b:b7:5b:c5:3f:29:aa:8d:ea:4d:0b:
2b:c2:f8:08:a6:4b:ce:48:83:8d:77:c7:95:37:2f:ee:b3:39:
a0:c3:98:b2:90:8b:5c:27:11:36:f1:dd:48:e9:0c:4a:1b:8e:
9e:5e:90:f9:65:24:cd:c4:61:e6:09:df:6d:a0:f4:b8:18:eb:
36:6a:96:0d:e2:ce:fc:3f:4c:3c:cb:d9:7e:48:a8:fa:15:66:
d5:e2:dc:28:a8:a1:c8:49:27:8f:70:47:02:c4:7c:79:82:18:
e6:7e:24:de:af:8f:68:62:51:a5:d1:62:12:f8:53:7c:98:02:
ef:7c:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:15 2025 by rpki-client